Shido Global Hack

Shido Global was exploited due to a smart contract configuration error, resulting in a loss of 235,458 $USD.

Shido Global, a Cosmos-based blockchain with EVM compatibility, was exploited due to a configuration error in the lock and claim mechanism, as well as the price difference between their old and new token pools in PancakeSwap. The attacker initially took a flash loan of 40 $BNB and swapped it to obtain a large amount of Shido tokens. Then, the attacker exploited a flaw in the ShidoLock contract that allowed them to convert v1 tokens to v2 tokens at a large scale.

Finally, the exploiter swapped these tokens for 1,016 WBNB, repaid the flash loan, and made away with a profit of roughly 977 $BNB which is worth $235,458 USD. The stolen funds were transferred through Celer Bridge.

Attacker Address:

Address 0x6981…770d

Malicious Contract Address:

Address 0xcdb3…a4cc

Malicious Transaction:

Tx 0x72f8…12d6

Bridging Transactions:

Tx 0x2de1…c99f

Tx 0x2a1b…69bb